Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
File:                     e7892961-7225-31aa-a19f-633419ec2b31.roa (raw, json)
Hash identifier:          z+GESelRkXxpjwHYa/3PDCS8CB5iCVqF8VCWrUdG0iA=
Subject key identifier:   A5:8F:6F:99:A6:3F:37:91:7D:B8:35:D9:C5:00:FC:7F:51:13:F7:64
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584DBE6B1FE72C78A977EF7BA680
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     36184
IP address blocks:        217.10.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:1f:e7:2c:78:a9:77:ef:7b:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=63c3d413-d76b-4095-9cd3-6c530fbad420
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b5:a7:a2:f5:cb:1f:86:d2:2e:66:e9:15:89:
                    13:1b:88:33:19:df:d4:8e:2f:91:b7:cd:3e:ff:80:
                    2a:cb:de:98:b6:69:33:28:ea:ac:46:d1:1d:ae:ba:
                    01:4f:7e:d8:88:94:8b:db:76:de:b3:26:fe:45:92:
                    43:0e:98:94:1e:59:d0:c0:2e:84:99:27:ba:d4:52:
                    1f:9e:98:09:2b:14:79:35:45:ee:1c:86:49:98:12:
                    a2:f3:cd:ba:c3:34:31:08:f3:8c:6d:d2:50:ac:c0:
                    43:d9:48:b4:9e:c9:43:98:4c:e5:d2:c8:f4:4b:b4:
                    9e:46:73:c7:5f:2c:22:23:c4:b3:6a:47:8f:a4:28:
                    37:2f:32:08:d5:41:bd:69:67:80:d9:a9:37:10:2d:
                    1d:38:e8:87:a3:26:e5:ce:8f:4e:f9:33:e6:22:9a:
                    a6:73:c4:70:fe:d0:91:e1:eb:74:93:74:5b:73:1a:
                    c7:41:10:17:b9:40:39:24:8f:15:15:94:22:6e:d4:
                    eb:b8:f2:24:30:48:a8:c2:41:c2:c7:89:c4:05:25:
                    9a:ca:f9:42:49:c0:e2:91:52:d7:8d:f9:27:6b:75:
                    f5:8c:d8:c7:67:99:d1:f3:27:40:89:66:54:ba:3e:
                    98:7c:90:82:4f:d3:ed:fa:8a:95:a4:4f:77:ac:fe:
                    7a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:8F:6F:99:A6:3F:37:91:7D:B8:35:D9:C5:00:FC:7F:51:13:F7:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e7892961-7225-31aa-a19f-633419ec2b31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.10.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:1a:d3:83:80:b4:ad:e2:0b:d9:12:51:58:c0:01:05:2b:
         85:74:e3:18:1c:b1:7b:3d:d6:8a:7e:54:59:83:07:53:f9:44:
         4a:98:eb:ed:8a:63:e4:83:c2:72:98:2a:e6:a5:f1:44:9b:a0:
         d6:26:5a:fa:9d:ea:53:32:b0:9f:17:4b:eb:99:fa:08:58:49:
         6f:db:4f:1f:70:e6:06:55:15:9f:63:74:53:a1:ea:c3:5d:c4:
         80:84:e1:89:87:3f:6c:da:5b:95:ad:1c:e7:ad:1d:b4:1c:27:
         ae:20:2e:d6:5a:d9:80:22:b2:b6:7b:a8:13:13:8d:60:41:dd:
         0b:83:b9:a4:d7:e0:54:40:e8:2f:37:3a:4a:27:d2:af:49:49:
         92:87:df:0c:80:7a:56:f7:84:c1:02:77:43:28:97:55:3b:7f:
         a6:7d:e2:5e:c6:91:38:0e:63:91:be:8c:90:c1:9c:c7:14:c4:
         e4:07:84:24:84:87:6a:0d:4e:b3:b6:a5:8b:b6:0f:ac:80:ed:
         30:90:d9:44:c2:42:63:58:81:43:aa:bf:6e:c9:34:66:b5:86:
         a9:72:23:70:b3:cf:6e:bd:87:60:49:49:6f:b2:07:e2:59:2f:
         a0:9c:78:e8:fd:db:e3:e6:b5:19:e2:5a:32:1a:c9:9d:aa:5d:
         f7:c4:d3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:29:31 2026 by rpki-client